Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa
File:                     7B6FCB36340B11F0B358096BC4F9AE02.roa (raw, json)
Hash identifier:          9rHElgQGkin/9e3Db5VLV3ihFuBVV27/iuFOrelwuPY=
Subject key identifier:   BA:C4:CB:F1:4F:2D:A5:39:B1:AB:9B:CC:A0:AB:F5:FD:6D:6F:8F:02
Certificate issuer:       /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial:       98
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:08:41 +0000
ROA not before:           Sun 18 May 2025 17:13:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153899
IP address blocks:        165.99.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
        Validity
            Not Before: May 18 17:13:57 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f408-b543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:0a:5f:d9:b1:07:55:e4:43:60:be:fd:1f:
                    6d:bc:4a:61:3d:94:60:0f:99:18:68:14:64:ff:8b:
                    7d:99:fc:14:b5:cd:fe:97:80:e5:0b:bc:17:ff:cd:
                    8d:4d:3f:7e:86:27:89:41:5e:d6:d9:c4:45:c1:29:
                    28:f9:3a:46:3d:b4:ff:aa:56:ee:23:a5:2e:09:7b:
                    bc:38:8d:5f:24:47:bd:da:cf:30:56:3b:49:57:03:
                    a2:74:78:df:26:44:7d:91:07:4d:2e:53:67:16:0f:
                    31:8f:5e:ce:5c:bf:29:85:51:cc:d1:b6:73:a7:2f:
                    1c:31:4b:eb:6d:a1:c1:a5:07:d6:17:61:8d:f8:62:
                    d7:de:bd:5a:71:ae:3a:24:ca:7e:f3:42:87:4c:6c:
                    8e:16:71:c3:9a:c0:57:01:a8:0a:6a:d0:9c:4c:a1:
                    f2:eb:ab:55:19:96:7c:18:52:94:da:44:bd:8d:34:
                    8b:d5:04:1f:6c:30:1c:5a:09:b7:f8:ff:f3:d3:1f:
                    31:c5:da:7e:25:85:87:a9:d6:57:8d:ca:b3:37:e9:
                    bd:ec:63:81:31:ad:2d:73:13:ea:96:b1:6e:3a:9e:
                    c9:47:a2:e5:16:63:0a:e3:29:5a:f4:27:6a:2f:3c:
                    ed:78:31:12:bd:74:73:c8:5d:28:e5:0d:e5:1a:9a:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C4:CB:F1:4F:2D:A5:39:B1:AB:9B:CC:A0:AB:F5:FD:6D:6F:8F:02
            X509v3 Authority Key Identifier:
                keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:8b:a5:84:21:1b:aa:b2:72:c9:0a:4a:b3:67:06:bc:aa:
         be:bb:59:75:19:5a:f7:4e:d8:d4:95:de:ca:7e:75:11:b8:78:
         57:68:50:1b:5c:47:4f:b6:14:bf:15:37:59:78:65:c2:23:19:
         a1:f9:c5:13:d1:a9:36:f6:6f:b7:8e:07:6b:07:5c:ab:78:fc:
         0b:92:e5:ba:16:3b:87:e9:dc:2e:73:61:e4:71:38:5d:52:cd:
         47:af:13:72:f2:9d:4d:ba:d4:41:0e:bb:e0:01:00:51:f1:24:
         5b:03:e4:5f:c3:83:c2:0a:08:3c:99:c0:fc:6e:5c:61:05:00:
         d7:f2:47:36:db:2c:6a:d9:bb:4b:e4:0e:01:00:7b:c7:a1:42:
         c3:4d:01:22:58:fa:6b:57:bb:a5:20:df:4c:ba:e6:40:5a:ab:
         d5:83:72:7e:15:83:70:af:6a:a8:b7:35:5b:14:39:1c:37:0c:
         60:a1:38:5e:5d:83:66:ee:5e:c0:88:8b:e9:fd:63:c5:97:7a:
         fc:fa:9a:fb:32:64:b8:32:c7:b9:b1:bd:b6:76:ce:22:5d:69:
         0f:d6:32:99:8a:a0:f1:e3:64:90:7d:e2:88:87:37:5c:13:b5:
         84:4b:1c:6d:77:2f:09:b7:3a:90:96:f3:75:78:dd:b9:6b:aa:
         c0:1d:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:44 2026 by rpki-client